This Page Is Inserted by IFW Operations 
and is not a part of the Official Record 

BEST AVAILABLE IMAGES 

Defective images within this document are accurate representations of 
the original documents submitted by the applicant. 

Defects in the images may include (but are not limited to): 

• BLACK BORDERS 

• TEXT CUT OFF AT TOP, BOTTOM OR SIDES 

• FADED TEXT 

• ILLEGIBLE TEXT 

• SKEWED/SLANTED IMAGES 

• COLORED PHOTOS 

• BLACK OR VERY BLACK AMD WHITE DARK PHOTOS 

• GRAY SCALE DOCUMENTS 



IMAGES ARE BEST AVAILABLE COPY. 



As rescanning documents will not correct images, 
please do not report the images to the 
Image Problem Mailbox. 
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(start) F I G .9 



IS CURRENT SESSION \NO 



\KEY Ks_odd (psc : 1 ) ? / 










YES 




=» 






«s 










A SESSION KEY UPDATING 
PROCESS IS TRIGGERED 
BY TIMER 








A SESSION KEY UPDATING 
PROCESS IS TRIGGERED 
BY TIMER 
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THE FLAG OF THE CURRENT 
SESSION KEY Ks IS SET TO 
"0" IN A MAC-ADDRESS-TO 
SESSION-KEY CORRESPOND- 
ENCE TABLE INSIDE THE 
DATA TRANSMI I ILR(psc IS 
SET AUTOMATICALLY TO "0" 








THE FLAG OF THE CURRENT 
SESSION KEY Ks IS SET TO 
T IN A MAC-ADDRESS-TO 
SESSION-KEY CORRESPOND- 
ENCE TABLE INSIDE THE 
DATA TRANSMI 1 lhR(psc IS 
SET AUTOMATICALLY TO T 


S4^ I 
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THE DATA RECEIVER 
DECRYPTS DATA USING THE 
SESSION KEY Ks even 
STARTING FROM A SECTION 
WHOSE psc IS "0" 








THE DATA RECEIVER 
DECRYPTS DATA USING THE 
SESSION KEY Ks odd 
STARTING FROM A SECTION 
WHOSE psc IS T 
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<S11 


THE DATA TRANSMITTER 
ENCRYPTS THE SESSION 
KEY Ks odd TO BE USED 
NEXT BY MEANS OF A 
MASTER KEY Km AND SENDS 
THE ENCRYPTED KEY 
TO THE DATA RECEIVER 








THE DATA TRANSMI I IbR 
ENCRYPTS THE SESSION 
KEY Ks even TO BE USED 
NEXT BY MEANS OF THE 
MASTER KEY Km AND SENDS 
THE ENCRYPTED KEY 
TO THE DATA RECEIVER 
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THE CURRENT SESSION KEY 
IS REPLACED BY THE NEXT 
SESSION KEY Ks odd IN THE 
MAC-ADDRESS- TO-SESSION 
KEY CORRESPONDENCE 
TABLE IN THE DATA TRANS- 
MITTER 








THE CURRENT SESSION KEY 
IS REPLACED BY THE NEXT 
SESSION KEY Ks even IN THE 
MAC-ADDRESS- T-0-SESSION 
KEY CORRESPONDENCE 
TABLE IN THE DATA TRANS- 
MITTER 


S7s ~T 
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(S13 


THE DATA RECEIVER 
VERIFIES THAT THE NEXT 
SESSION KEY Ks_odd IS 
NOW RETAINED BY ALL 
TARGET DATA RECEIVERS 








THE DATA RECEIVER 
VERIFIES THAT THE NEXT 
SESSION KEY Ks even IS 
NOW RETAINED BY ALL 
TARGET DATA RECEIVERS 
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table_id 



Pi 



rs^l 



section_length 



MAC address 6 



MAC address_5 



rsvd 



psc 



asc 



sect ion_number 



iast^ 

section number 



MAC address_4 



MAC address_3 



MAC_address_2 



MAC address 1 



ss I 
pi 

rsvd 

psc 

asc 

LSf 

cni 



sect i on_syntax_ i nd i cator 
pr i vate_ind icator 
reserved 

pay I oad_sc ramb I e_ i nd i cator 
address_scramb I e_J nd i cator 
LLC_SNAP_flag 
current_next_i nd icator 



F I G.1 1 



112 



MAC ADDRESS 


Ks_even 


Ks_odd 


Ks FLAG 


08:00:46:01:07:24 


0XC08F...25 


0X90B3...AF 


0 


08:00:45:01:07:09 


0X26D2...61 


0XBA02...3C 


1 


0l:00:5e:16:0:0 


0X461 E... 67 


0XDC1A...22 


0 
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(start) 



S21 



THE DATA TRANSMITTER RECEIVES 
FROM ITSELF OR FROM THE OUTSIDE 
AN IP DATAGRAM TO BE SENT OVER 
SATELLITE LINKS 



1 



S22 



THE DATA TRANSMITTER CHECKS A DESTINATION 
ADDRESS OF THE IP DATAGRAM, FINDS OUT A 
MAC ADDRESS FROM AN IP-ADDRESS-TO-MAC- 
ADDRESS CORRESPONDENCE TABLE, AND 
PREPARES A SECTION ACCORDING LY (WITH 
PADDING ADDED AS NEEDED) 



S23 



THE DATA TRANSMITTER EXTRACTS THE CURRENT 
SESSION KEY Ks BY CHECKING A FLAG OF THAT 
KEY IN THE MAC- ADDRESS-TO-SESSION KEY 
CORRESPONDENCE TABLE, AND ENCRYPTS A DATA 
PART OF THE SECTION USING THE EXTRACTED KEY 
(psc IN THE SECTION HEADER IS SET WITH THE 
FLAG OF THE KEY Ks) 



S24 



THE DATA TRANSMITTER DIVIDES THE ENTIRE 
SECTION INTO PAYLOAD PARTS OF TS PACKETS, 
SUPPLEMSNTS TS HEADERS WITH A PREDETERMINED 
PID EACH. AND ENCRYPTS THE PAYLOAD AS NEEDED 



S25 



THE TS PACKETS ARE OUTPUT 
ONTO SATELLITE LINKS 
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IP ADDRESS 


b i tmask 


MAC address 


133.11.9.39 


255. 255. 255. 225 


08:00:46:01:07:24 


133.11.20.0 


255. 255.255.0 


08:00:46:01:07:09 


226. 0. 0. 0 


255. 255. 255. 224 


0l:O0:5e:l6:0:0 
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MAC ADDRESS 


Ks_even 


Ks_odd 


08:00:46:01:07:24 


0XC08F...25 


0X90B3. ..AF 


0i:00:5e:i6:0:0 


0X461E...67 


0XDC1A...22 
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VERS 


HLEN 


SERVIE TYPE 


TOTAL LENGTH 


IDENTIFICAION 


FLAGS 


FRAGMENT OFFSET 


TIME TO LIVE 


PROTOCOL 


HEADER 


CHECKSUM 






SOURCE IP 


ADDRESS 








DESTINATION 


IP ADDRESS 




IP OPTIONS (IF ANY) 


PADDING 


DATA 
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(start) 



THE DATA RECEIVER DECRYPTS TS PACKETS 
RECEIVED OVER SATELLITE LINKS TO 
RECONSTRUCT A SECTION THEREFROM 
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I 



THE DATA RECEIVER EXTRACT A MAC ADDRESS 
OF THE SECTION AND CHECKS TO SEE IF THE 
MAC ADDRESS IS FOUND IN A MAC-ADDRESS- 
TO-SESSION-KEY CORRESPONDENCE TABLE 
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THE CURRENT SESSION KEY Ks IS EXTRACTED 
FROM THE CORRESPONDENCE TABLE IN 
ACCORDANCE WITH THE psc VALUE 



DATA ARE 
DISCARDED 
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THE DATA RECEIVER DECRYPTS THE SECTION 
DATA USING THE CURRENT SESSION KEY Ks 
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THE DATA RECEIVER CALCULATES THE 
LENGTH OF THE I P DATAGRAM BASED 
ON THE TOTAL LENGTH FIELD OF THE 
I P HEADER AND-REMOVES PADDING 



I 
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THE EXTRACTED I P DATAGRAM IS PASSED 
ONTO A HIGHER-ORDER PROTOCOL 
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